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(57) ABSTRACT 

A system and method for provisioning a two-way mobile 
communications device having a display screen and user 
interface that is initialed from the device to be provisioned. 
The device to be provisioned establishes a secure commu- 
nications session with a provisioning server device. The 
subject communications path may utilizie an intermediate 
server device. The user of the device is then presented with 
a plurality of input and choice screens, which may be iised 
in conjunction with the user interface to provide user 
information, select device features and services. The user 
information and selected feature and service requests are 
then forwarded to the provisioning server device. The pro- 
visioning server device processes the received information 
and generates provisioning packages, registration requests, 
and notifications for the subject mobile device and for any 
associated server device providing services. The provision- 
ing packages may comprise software modules, parameters 
and any required security information. 
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METHOD AND SYSTEM E\CILITATING 
WHEB BASED PROVISIONING OF TWO-WAY 
MOBILE COMMUNICATIONS DEVICES 

BACKGROUND OF THE INVENTION 5 

1. Field of the Invention 

The present invention relates to two-way mobile commu- 
nication devices and, more particularly, to a method and 
system for provisioning the features and services available 
to the two-way mobile communication devices. 

2. Description of the Related Art 

For persons and businesses requiring instant access to 
information, the Internet and Intranets have provided a 
vehicle for near real-time delivery of information from an 
enormous number of sources. For many of those same 
individuals, two-way mobile communication devices (e.g., 
cellular phones, two-way pagers. Personal Digital Assistants 
(PDAs), and handheld computing devices) have provided a 
means for communicating irrespective of locality. It was 20 
only natural for these two exploding mediums to come 
together in a manner such that two-way mobile commuoi- 
cation devices have become one of a plurality of entry 
vehicles into the Internet and Intranets. 

The current generation of two-way mobile commuinica- 25 
tion devices have microprocessors, information storage 
capability, and run one or more software applications. 
Examples of software applications used in these devices 
include micro-browsers, address books, and email clients. 
Additionally, this generation of two-way mobile communi- 30 
cation devices has access to a plurality of services via the 
Internet and Intranets. 

Before a consumer can use one of these devices, a number 
of parameters must be provisioned into the device in order 
to enable communication services and applications and in 35 
order to distinguish the device from others within the 
communications network. In addition to provisioning the 
two-way mobile communication device, it is also necessary 
to provision network elements in the communications net- 
work which are responsible for effecting mobile communi- 40 
cations services and applications (e.g., billing plan, voice 
mail, call forwarding, email, information services etc.). 

As with any other service -related industry, consumers 
demand convenience in the provisioning process. From the 
consumer's perspective it would be preferable to be able to 45 
walk into a store and select from an assortment of devices 
and services without being pressured by a sales person 
pushing a particular device or service. 

Unfortunately, there are other concerns that effect the 
manner and procedures involved in provisioning the two- 50 
way mobile communications devices and services. Fraud is 
a $1 billion dollar problem for the telecommunications 
industry. In 1997, about $600 million was lost due to cloning 
fraud and another $400 million was lost from subscription 
fraud (Corsair Communications). 55 

Thus, there exists a need for a method and system for 
provisioning two-way mobile communications devices and 
services that is convenient for consumers and secure for the 
service providers and device manufacturers. 

SUMMARY OF THE INVENTION 

In view of the above, it is one of the objects in the present 
invention to provide a method and system for provisioning 
two-way mobile communications devices and services that 
provides convenience for consumers without compromising 65 
the carrier's and service provider's sensitive provisioning 
information. 
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According to one aspect of the present invention, a system 
and method for provisioning a two-way mobile communi- 
cations device having a display screen and user interface that 
is initiated from the device to be provisioned. The device to 
be provisioned establishes a secure communications session 
with a provisioning server device. The subject communica- 
tions path may utilize an intermediate server device. The 
user of the device is then presented with a plurality of input 
and choice screens, which may be used in conjunction with 
the user interface to input user information and select device 
features and services. The user information and selected 
features and services are then forwarded to a provisioning 
server device. The provisioning server device processes the 
received information and generates provisioning content and 
notifications for the subject mobile device and for any 
associated server device providing service(s). The provi- 
sioning packages may be comprised of software modules 
and any required security information. 

According to another aspect of the present invention, a 
system and method for provisioning a two-way mobile 
communications device having a display screen and user 
interface that is initiated from a remote server device. The 
remote server device establishes a secure communications 
session with a provisioning server device and provides the 
provisioning server with user information and features and 
services for which the two-way mobile communications 
device is to be provisioned for. Hie provisioning server 
device processes the received information and generates 
provisioning packages and notifications for the two-way 
mobile communications device and for any associated server 
device providing services. Preferably the provisioning pack- 
ages may comprise software modules, parameters, and any 
required security information. User information may be 
provided to the remote server device through a system 
utilizing a telephone and an Interactive Voice Response Unit 
(I VRU) or from a user to a representative who forwards the 
information to the provisioning server device. 

The advantages of the invention are numerous. Different 
embodiments or implementations may yield one or more of 
the following advantages. One advantage of the present 
invention is that the user of a two-way mobile communica- 
tions device can initially provision features and services 
without having to go to a retail establishment. Another 
advantage of the present invention is that the user can 
change the features and services associated with their two- 
way mobile communications device after the initial provi- 
sioning. Still another advantage of the present invention is 
that the carrier can remotely change the features and services 
associated with a two-way mobile communications device 
and provide a system for notifying the user of the changes 
made. 

Other aspects and advantages of the invention will 
become apparent from the following detailed description 
taken in conjunction with the accompanying drawings, 
which illustrate by way of example, the principles of the 
invention. 

BRIEF DESCRIPTION OF THE DRAWINGS 
The present invention will be readily understood by the 
following detailed description in conjunction with the 
accompanying drawings, wherein like referenced numerals 
designate the structural elements, and in which: 

FIG. 1 illustrates a conomunications system, which may 
be utilized to practice the present invention; 

FIG. 2 illustrates a schematic of a two-way mobile 
communications device according to an embodiment of the 
present invention; 
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FIG. 3 illustrates a block diagram of the principle com- 
ponents of an exemplary two-way mobile communications 
device; 

FIG. 4 schematically illustrates the relationship between 
the provisioning server and the other system components; 

FIG. 5 schematically illustrates the mechanism for 
exchanging information between the two way mobile com- 
munications device and the provisioning server; 

FIG, 6 schematically illustrates the mechanism for 
exchanging information between a service server and the 
provisioning server; 

FIG. 7A is a flow chart, which describes a two-way 
mobile communications device request for provisioning; 

FIG. 7B is a flow chart, which describes the provisioning 
of the features requested by the two-way mobile communi- 
cations device; and 

FIG. 7C is a flow chart, which describes the provisioning 
of the services requested by the two-way mobile communi- 
cations device. 

DETAILED DESCRIPTION OF THE 
INVENTION 

The invention pertains to systems and methods, which 
enables the provisioning of a two-way mobile communica- 
tions device having a display screen and user interface. 
According to one embodiment of the present invention, a 
provisioning transaction is initiated by a request to a pro- 
visioning server device from the two-way mobile commu- 
nications device to be provisioned. The provisioning request 
may be forwarded through a proxy server device, which acts 
as a trusted third party in authenticating the principle par- 
ticipants. The provisioning request includes information 
input by the user using the user interface and device iden- 
tification information resident in the mobile communication 
device. User input information may include personal iden- 
tification information and financial information (e.g., credit 
card numbers, bank account numbers etc.) requiring verifi- 
cation by an outside processing entity (e.g., TRW). Upon 
verification of the user information and the device 
information, the provisioning server device processes the 
provisioning request. This processing may require the deliv- 
ery of software modules and registration information to the 
provisioned two-way mobile communications device and 
any server devices (e.g., service servers) providing service. 
During the process, the user of the device may receive 
notifications relating to the state of processing and the 
services and features provisioned. These notifications may 
be pushed to the provisioned device through a narrow-band 
data channel (e.g., Short Message Service (SMS)). 

The two-way mobile communication device, also referred 
to as two-way interactive communication devices, wireless 
client devices, and mobile devices, include but are not 
limited to personal digital assistants, palm-sized computing 
devices, cellular phones, two-way pagers, and wireless 
capable remote controllers. Such devices typically have 
significantly less memory and processing capability than is 
found in desktop and laptop computers. These mobile 
devices typically have a small display screen and a keypad 
with a reduced character set, as opposed to the full function 
keyboards and monitors associated with desktop or laptop 
computers. 

Embodiments of the invention are discussed below with 
reference to FIGS. 1-7C. However those skilled in the art 
will readily appreciate that the detailed description given 
herein with respect to these figures is for exemplary pur- 



17,260 B2 

4 

poses as the invention extends beyond the embodiments 
discussed below. 

To facilitate a description of the present invention, it is 
deemed necessary to recite some of the features of a com- 

5 munications system in which the invention may be prac- 
ticed. Referring to FIG. 1 a block diagram of a typical 
communications system according to one embodiment of the 
present invention is displayed. Mobile device 100 (e.g., a 
cellular telephone, a two-way pager, a personal digital 

10 assistant, or a palm-sized computer) receives phone calls 
through a voice communications channel and hypermedia 
information (e.g., Hyper Text Markup Language (HTML) 
documents. Compact Hypertext Transport Protocol 
(cHTML) documents, Extensible Markup Language (XML) 

15 documents, Handheld Device Markup Language (HDML) 
documents, or Wireless Markup Language (WML) 
documents) from remote server devices through broad-band 
and narrow-band (e.g., SMS) data communications channels 
which may include proxy server device 108 and Short 

20 Message Service center (SMSC) 110. Mobile device 100 has 
a display 102 and a user interface 103. Additionally, mobile 
device 100 may have a micro-browser (e.g., a micro-browser 
firom Unwired Planet, Inc. 800 Chesapeake Drive, Redwood 
City, Calif., 94063) stored in a local memory which enables 

25 it to process hypermedia information received from remote 
server devices. 

Information is exchanged between mobile devices 100 
and remote server devices (e.g., provisioning server 120 and 
service server 122) using aimet 104 and landnet 118. Aimet 
104 may be, for example, a cellular digital packet data 
network (CDPD), a Global System for Mobile (GSM) 
network, a Code Division Multiple Access (CDMA) 
network, a Time Division Multiple Access (TDMA) 
network, a Personal Digital Cellular (PDC) network or a 
Personal Handy-phone System (PHS) network. The com- 
munications protocols used by aimet 104 may, for example, 
be Wireless Access Protocol (WAP) or Handheld Device 
Transport Protocol (HDTP). Landnet 118 is a land-based 
network that may be the Internet, an Intranet or a data 
network of any private network. Typically the communica- 
tion protocol supporting landnet 118 may be Transmission 
Control Protocol (TCP/IP), Hypertext Transport Protocol 
(HTTP), or Secure Hypertext Transport Protocol (sHTTP). 

The data communication path between aimet 104 and 
landnet 118 may be bridged by proxy server device 108, 
which coordinates the exchange of information on the 
wide -band and narrow-band communications channels pro- 
viding communication with mobile device 100. The narrow- 
band channel may be used for the exchange of content 
requiring limited bandwidth transmission services (e.g.. 
Short Message Service (SMS)) and the wide-band channel is 
used for all other exchanges. An additional server device 
(e.g.. Short Message Service Center (SMSC)) 110 generally 

J J coordinates communications on the narrow-band channel. 
Proxy server device 108 and SMSC 110 may be, for 
example, a SPARC workstation from Sun Microsystems, 
Inc. (http://www.sun.com). As previously stated proxy 
server device 108 acts as a bridge between aimet 104 and 
remote devices connected by landnet 118. It should be 
pointed out, however, that the functions of proxy server 
device 108 and SMSC 110 may be performed by network 
server devices connected to landnet 118 with hardware well 
known in the art providing the connection between aimet 

65 104 and landnet 118. 

According to one embodiment of the present invention, 
mobUe device 100 is initially unprovisioned when obtained 



WEST 



us 6,647,260 B2 

5 6 

(e.g., at a retail store or via the mail) by a user. When mobile 1, is provided. Mobile device 300 includes memory 312 that 

device 100 is initially turned on a communications session stores data and/or software for performing many of the 

is established with proxy server device 108 and a provision- functions of the device 300 when executed by a processor 

ing application is activated which displays scripts on display 302. Mobile device 300 also includes a Wireless Control 

screen 102 of mobile device 100 prompting the user to input 5 Protocol (WCP) interface 328 that couples to a carrier 

provisioning related information via user interface 103. The network via aimet 320 to receive incoming and outgoing 

provisioning related information and pre-stored device iden- signals. De vice idenUfier (ID) storage 316 stores and sup- 

tification information (also referred to as a provisioning P^.^ ^^"^ to WCP mterface 328 for the purpose of 

request herein) are forwarded to provisioning server 120 via identifjong mobile device 300 to outside entires (e.g., proxy 

proxy server device 108 using a secure communications 10 ^'^^ *=^'«= 1); ^ '1^"?= identifies a 

session. The secure communications session is faciliuted by ^P«°^= 'f "^""'ed with mobile device 300 and 

a previously stored uniform resource identifier (URI) asso- ''"^'^y <=oaesponds to the device ID m the user account 

dated with provisioning server 120 and authentication ser- 7^''''^}^^°'",^^ an associated proxy server device (e.g., 

vices provided by proxy ser^'er device 108. 1™» °^ \^ ^^^ihon mobile device 300 includes a 

. . • r . ■ cheat module 3U4 that pertorms many of the processmg 

Hie provisionmg request contains information relating to 15 fo^.j by mobile device 300 including: establish- 
the mobile device features and services desired by the user. ^ ^ communication session with a proxy server device via 
Additionally the provisiomng request may contain the ^^0. ^ ^^^^^ maintaining a resident address 
accounlmpnformation(e.g credit card mformation. bank- displaying information on a display screen 308 
cards etc.) used to estabbsh a user account. The provided ^^^^^^^^ receiving user input from keypad 306. The 
accounting information can be verified by apphcations resi- 20 ^^^^^ ^^^^^^ ^ .^^^^^^^ 
dent on provisionmg server 120 or by outeide financial establishment of a communication session and the request- 
services, which are accessible via laadnet U8 (e.g., TRW). ^ r^c^Wing of data. The device 300 further includes 
Once the information m the provisioning request is vcnfied ^^-^ ^^^^ inputting and outputting audio, and 
provisiomng content is forwarded to mobile device 100 and encoder/decoder 310 coupled between processor 302 and 
provided to any network eleinent (e.g service server 122) 25 ^^.^ encoding and decoding audio signals, 
providing service to mobile device 100 as a resuh of the ™„ a u n n . * 1 u * 
*^ . * J „ u J J FIG. 4 schematically illustrates the relationship between 
services requested. Additionally, the user may be provided ... .-^ ... j . 

. J- . . . . , .. ... • f.L the provisioning server 430, which may correspond to 

with periodic status updates relating to the processmg of the f. . t-yn ct-tA i j .i_ *u 

^, . . t - r 1 . .L ? . provisiomng server 120 or FIG. 1, and the other components 

provisioning request and information relating to the features ^.^l, • * t/- - : ^ 

. > ^ - J in of the com mumcations system. It is important to note at this 

and services actually provisioned. • . * ^t. r <- . . . , 

point that the lunctions of provisioning server 430 may be 

Mobile device 100 is pre -provisioned with the content incorporated in proxy server device 408 or another device 

requured to communicate with an automated Customer Ser- direct or indirect access to aimet 404. Provisioning 

vice Center (E-CARE) 112 via data and voice communica- server 430 is comprised of Land Control Protocol (LCP) 

tions channels. The E-CARE center 112 may provide assis- interfaces 434 and 448, processor 438, storage device 442 

tance to the user during the provisioning process. One ^nd a provisioning kernel 444 comprised of a plurality of 

embodiment of an E-CARE center is disclosed in U.S. software modules. More specifically, the provisioning kernel 

patent application Ser. No. 09/093,944 entitled "Visual is comprised of a Registration Module, a Services Module, 

Interface to Mobile Account Services" and is hereby incor- ^nd a Device Feature Module 

porated by reference. 40 The Registration Module coordinates the processing of 

With reference now to FIG. 2, mobile device 200 (e.g. a the provisioning request in terms of verifying the request 

cellular telephone, a two-way pager, a personal digital components (e.g., device identification information, 

assistant, or a palm-sized computer) comprises a display accounting and information) and matching the requested 

screen 204, a user interface 216, a speaker 224, and micro- device features and services with available features and 

phone 228, Display screen 204 contains hyper media infor- services. It is important to note at this point that the 

mation 208, a hypermedia selection identifier ">'710 and provisioning content required to process the request may be 

softkey identifiers 212 and 214. User interface 214 has resident on the provisioning server receiving the request or 

function keys (e.g., "MENU", "BACK"), alphanumeric on any server device accessible via landnet 450. 

keys, and navigation keys (t and i). Additionally, function Provisioning content relating to mobUe device features 

keys 216 and 220 are utilized for soft key inputs. retrieved from the Device Feature Module. The provi- 

Hypermedia information 208 is illustrative of the type of sioning content relating to requests for device features takes 

an entry screen relating to the provisiomng application. the form of software modules, which modify the resident 

Hypermedia information 208 is comprised of a plurality of features of mobile device 400 or activation information 

selectable identifiers corresponding to selections available in required to initialize previously installed non-operational 

the provisioning application. It is important to note that each 55 applications. Once the features of mobile device 400 have 

of the identifiers is associated with a Uniform Resource been provisioned, a notification is provided to billing center 

identifier (URI) and the associated URIs may be for the same 460. The provisioned features arc also displayed on the 

provisioning server device or different provisioning server display of mobile device 400. 

devices. The navigation keys (t and i) are used to navigate Provisioning content relating to services arc retrieved 

the list of selectable identifiers where hypermedia selection gg fi-om the Services Module. The provisioning content relating 

identifier 210 indicates the selected item. The provi- to requests for services takes the form of a request to register 

sioning apphcation allows the user to pick and chose desired a new user This request is comprised of the URI of service 

device features and services (selections 2 and 3 on screen server providing the service (e.g.. service server 422) and 

204) or to select predetermined device and service oonfigu- registration information relating to the user of mobile device 

rations (selection 1 on screen 204). ^5 400. Once mobUe device 400 has been registered, a notifi- 

Ref erring now to FIG. 3, a more detailed description of cation is provided to billing center 460. Additional notifi- 

mobile device 300, which may be mobile device 100 of FIG. cations and information required to access the provisioned 
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services (e.g., passwords) are sent to mobile device 400 Corresponding changes to the billing account will be made 

through a narrow band channel (e.g., an SMS message). concurrently. Additionally, offers relating to feature and 

FIG. 5 schematically illustrates the exchange of provi- service upgrades can be forwarded to the device user via a 

sioning content between mobile device 500, which may be narrowband channel (e.g., an SMS message), 

mobile device 100 of FIG. 1 and provisioning server 530, 5 It is important to note at this point that the exchange of 

which may be provisionmg server 120 of FIG. 1. Mobile information between the mobile device requesting provi- 

device 500 generates a provisioning request which is then sioning (e.g., 100 of FIG. 1), the provisioning server (e.g., 

forwarded to provisioning server 530 via the message send 120 of FIG. 1) and the service server (e.g., 122 of FIG. 1) 

manager 520 resident in mobile device 500 and the message is conducted using mutually exclusive secure communica- 

receive manager 546 resident in provisioning server 530. As tions sessions. In effect the provisioning server acts as a 

previously stated, information relating to the mobile device trusted third party in registering the requesting mobile 

(e.g., a pre -stored device identification number) and infor- device with the service server providing the requested 

mation required to establish a user account (e.g., credit card service. 

information) are verified prior to processing the provisioning FIG. 7A illustrates a process flow chart which describes 

request if the phone has not previously been provisioned. ^5 the process 700 used by a mobile device (e.g., mobile device 

The information verification process can be performed by 100 of FIG. 1) to generate a provisioning request. At 702 a 

applications resident in provisioning kernel 534 using infor- secure communications session is established between the 

mation stored in storage device 538. Additionally the veri- requesting mobile device and the provisioning server (e.g., 

fication process can be performed by outside entities acces- provisioning server 120 of FIG, 1). At 704 the identity of 

sible through a landnet (e.g., the Internet or an Intranet). 20 both participants is mutually authenticated. If mutual 

The provisioning request received from mobile device authentication fails the session is terminated at 706. If 
500 contains requests for specific device features and ser- mutual authentication is successful, the device identification 
vices. Applications resident within provisioning kernel 534 information and user information are forwarded, at 708, to 
match the requested features and services with available the provisioning server where they are verified at 710. If 
features and services listed in database 542. The content 25 either the device information or the xiser information fails 
relating to the features and services Usted in database 542 the verification process then the session is terminated at 712. 
need not be resident on provisioning server 530. The content If the verification process is successful then the provisioning 
may be resident on a remote server device accessible request is processed at 714. Feature provisioning (716-A) is 
through a landnet (not shown). If requested features or described in FIG. 7B, service provisioning (718-B) is 
services are not resident within database 542 or if there is 30 described in FIG, 7C and package provisioning provisions, 
some conflict with the features or services requested then a at 720, a predetermined group of features and services using 
notification message (e.g., SMS message) is sent to mobile the process described in FIGS. 7B and 7C. 
device 500. Content relating to matching device features and Referring now to FIG. 7B, the process 730 of feature 
services is forwarded to the requesting mobile device via provisioning is described. Upon processing of the provision- 
message send manager 550 and message receive manager 35 ing request, terms, conditions, and related information noti- 
512 and is stored in storage 508. The content may be fications are pushed to the requesting mobile device using 
comprised of software modules and information required to the narrowband channel (e.g., an SMS message) at 732 for 
communicate with limited access commercial server approval by the user prior to implementation. Additionally 
devices. Additionally, mobile device 500 is registered with this information may forwarded to the user through a 
the limited access server devices providing requested ser- 40 predetermined email address or facsimile number. If the user 
vices and registered with a billing entity. declines at 734, then the session is terminated at 736. If the 

FIG. 6 schematically illustrates the exchange of informa- user accepts then, at 738, a notification to that effect is 

tion between service server 660, which may be service forwarded to the requesting mobile device through a nar- 

server 122 of FIG. 1 and provisioning server 630, which may rowband channel and the provisioning content is forwarded 

be provisioning server 120 of FIG. 1. Provisioning server 45 to the mobile device via a wideband channel. The provi- 

630 forwards a user registration request to service server 660 sioning content is provisioned at 740 and a determination is 

via a message send manager 650 and message receive made at 742 as to whether the provisioning content was 

manager 662. Provisioning server 630 and service server implemented successfully. If the implementation fails then 

660 arc connected by a landnet (e.g., the Internet or an the user has the option of requesting a retransmission at 748 

Intranet) which is not shown in the drawing. Mutual authcn- 50 via a request generated at 750. If the implementation is 

tication of the participants involved in the transaction are by successful then a confirmation message is generated at 744 

methods well known in the art. User information and infor- and forwarded to the provisioning server at 746. 

mation relating to requested services is stored in database Referring now to FIG. 7C the process 760 utilized by the 

642. The information is forwarded to service server 660 provisioning server (e.g., 120 of FIG. 1) to register a 

where it is stored in storage 668 and used to register the user 55 requesting mobile device (e.g., 100 of FIG. 1) with a server 

for the requested services. Acknowledgments regarding the device providing service (e.g., 122 of FIG. 1) is described, 

user's registration and provisioning content 672 (e.g. pass- At 762 a communications session is established between the 

words security information, etc.) arc forwarded to provi- provisioning server and the service server where the two are 

sioning server 630 by a registration kernel 664 via message subjected to a mutual authentication process at 764. If the 

send manager 674 and message receive manager 646, Pro- eo mutual authentication process fails then the session is ter- 

visioning server 630 forwards the provisioning content and minated at 766. If mutual authentication is successful then 

any related notifications to the requesting mobile device. user registration information is forwarded to the service 

Once the initial device features and services are server 768. The registration request is processed at 770 and 

provisioned, account information is registered with a billing rf the device is successfully registered (772) then a regis- 

entity. Changes to the features or services may be initiated 65 tralion confirmation notification is generated at 774 and 

at any time by the user or by an authorized administering forwarded to the provisioning server at 776. If registration 

entity using the systems and methods described above. fails (772) due to corrupted registration information or 
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missing information ihen the user has the option of 
re-sending a registration request at 778. This is done by the 
service server which generates a request for the missing or 
corrupted information at 780. 

The present invention has been described in sufficient 5 
detail with a certain degree of particularity. It is understood 
to those sidlled in the art that the present disclosure of 
embodiments has been made by way of example only and 
that numerous changes in the arrangement and combination 
of parts as well as steps may be resorted without departing 
from the spirit and scope of the invention as claimed. 
Accordingly, the scope of the present invention is defined by 
the appended claims rather than the foregoing description of 
one embodiment. 

What is claimed is: 

1. A method for provisioning a two-way mobile commu- 
nications device having a display and a user interface, the 
method being performed by the two-way mobile communi- 
cations device and comprising: 

receiving tiser information required to establish a user 
account; 20 

displaying a list of selectable identifiers on the display, 
each selectable identifier corresponding to a selectable 
service or feature for which the two-way mobile com- 
munications device can be provisioned; 

receiving a user's selection of a selectable identifier from 
the list; 

generating a provisioning request comprising the user 

information and the user's selection; 
establishing a communications link with a provisioning 

server; 

providing authentication information to enable a remote 
server to authenticate the two-way mobile oonmiuni- 
cations device; 

sending the provisioning request to the provisioning 35 

server over the communications link; 
receiving a reply to the provisioning request; and 
provisioning the two-way mobile communications device 

with a feature or service based on the reply. 

2. The method of claim 1, wherein receiving the reply 40 
comprises receiving software to enable the services; and 
provisioning the two-way mobile communications device 
comprises installing the software in the two-way mobile 
communications device. 

3. The method of claim 1, wherein receiving the reply 45 
comprises receiving activation information to render opera- 
tional previously installed non-operational software in the 
two-way mobile communications device. 

4. The method of claim 3, wherein provisioning the 
two-way mobile communications device comprises activat- 50 
ing the non-operational software with the activation infor- 
mation. 

5. The method of claim 1, wherein establishing the 
communications link with the provisioning server is accom- 
plished via a wide area communications network. 55 

6. The method of claim 5, wherein the wide area com- 
munications network comprises the Internet. 

7. The method of claim 6, wherein establishing the 
communications link is accomplished via a proxy server 

8. The method of claim 7, wherein the proxy server acts 60 
as a gateway to bridge communications between an airnet 
with which the two-way mobile communications device 
communicates and the wide area communications network 
with which the provisioning server communicates. 

9. The method of claim 8, wherein the remote server, the 65 
proxy server, and the provisioning server arc included in a 
single server device. 
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10. The method of claim 9, wherein the seleaable iden- 
tifiers further correspond to selectable service packages, 
each package comprising predetermined feature and ser- 
vices configurations for the two-way mobile communica- 
tions device. 

11. The method of claim 10, wherein each selectable 
identifier comprises an identifier of a corresponding provi- 
sioning server. 

12. The method of claim U, wherein the identifier is a 
uniform resource locator. 

13. The method of claim 1, wherein receiving the reply 
comprises receiving terms and conditions on which a service 
provider is prepared to provide services. 

14. The method of claim 13, further comprising receiving 
the user's approval of the terms and conditions; and for- 
warding the user's approval to the provisioning server. 

15. The method of claim 1, wherein receiving the reply 
comprises receiving a notification indicating which services 
and features have been provisioned. 

16. The method of claim 1, wherein receiving the reply 
comprises receiving a notification relating to a state of 
processing of the provisioning request. 

17. The method of claim 1, wherein establishing the 
communications link comprises establishing a secure com- 
munications link. 

18. The method of claim 1, wherein receiving the reply is 
accomplished on a narrow band channel. 

19. The method of claim 18, wherein the narrow band 
channel is an SMS channel. 

20. A provisioning server comprising a processor and a 
memory coupled thereto, the memory storing instructions 
which when executed by the processor cause the processor 
to perform a method comprising: 

receiving an authentication request from a proxy server; 

sending authentication information to the proxy server in 
response to the authentication request; 

receiving a provisioning request from a two-way mobile 
communications device as a forwarded message from 
the proxy server, the provisioning request comprising 
user information required to establish a user account, 
device information identifying the two-way mobile 
communications device, and a user selection indicating 
a user's selection of services to be provisioned; 

verifying the user information and device information; 
and 

provisioning the two-way mobile communications device 
with the user's selection of services. 

21. The provisioning server of claim 20, wherein provi- 
sioning the two-way mobile communications device com- 
prises generating notifications relating to terms and condi- 
tions associated with a service in the user selection; 
forwarding the generated notifications to the two-way 
mobile communications device; and receiving user accep- 
tance of the terms and conditions. 

22. The provisioning server of claim 20, wherein provi- 
sioning the two-way mobile communications device com- 
prises establishing a commimications link with a service 
server providing a service which has been requested in the 
provisioning request; and sending a request to the service 
server requesting registration of the user for the service. 

23. Hie provisioning server of claim 22, wherein the 
communications hnk is a secure communication link. 

24. The provisioning server of claim 20, wherein provi- 
sioning the two-way mobile communications device com- 
prises sending activation information required to activate 
previously stored non-operational applications in the two- 
way mobile communications device. 
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25. The provisioning server of claim 20, wherein provi- receiving a provisioning request from the two-way mobile 
sioning the two-way mobile communications device com- communications device; 

prises sending software modules to the two-way mobile mutually authenticating the two-way mobile communica- 

communications device to enable the requested services. tions device and a provisioning server; and 

26. A method for processing a provi^oning request froin 5 fo^^^aing the provisioning request to the provisioning 
a two-way mobile communications device, the method server only if the mutual authentication was successful; 
comprising: wherein the receiving, the mutual authenticating, and 

receiving at a provisioning server, an authentication the forwarding is performed by a proxy server which 

request from a proxy server; bridges communications between a first communica- 

sending authentication information to the proxy server in tions network and a second communications network, 

response to the authentication request; 34. The method of claim 33, wherein the first communi- 

receiving the provisioning request from the two-way cations network is an airnet; and the second communications 

mobile communications device as a forwarded message network is a wide area communications network, 

from the proxy server, the provisioning request com- ^5. The method of claim 34, wherein receiving the 

prising user information required to establish a user provisioning request is via the aimet and forwarding the 

account, device information identifying the two-way provisioning request is via the wide area communications 

mobile communications device, and a user selection network. 

indicating a user's selection of services to be provi- 36. The method of claim 35, wherein the proxy server 

sioned* exchanges information between the two-way mobile com- 

verifying the user information and device infomiation; municat ion device and the provisioning server via mutually 

exclusive secure communications sessions with the two-way 

. . . , , . . , . mobile commtmications device and the provisioning server, 

provisioning the two-way mobile communications device respectively 

with the user^s selection of services. 37 -j^^ ^^^^^^ ^j^.^ ^^^^^^ ^^^^^ 

27. nie method of claim 26, wherein provisiomng the 25 provisioning server are included in a single server 
two-way mobile communications device comprises gener- device 

ating notifications relating to terms and oondiUons associ- 33 ^ ^^^^ comprising a processor and a memory 

ated with a service m the user selection; forwardmg the ^^^^^^^^ ^ ^^^^ instructions which 

generated notification to the two-way mobile commumca- ^^^^ ^^^^^^^^ ^ processor cause the processor to 

tions device; and receiving user acceptance of the terms and 30 ^^^^^ ^ ^^^^^^ comprising: 

conditions. . . ... 

28. Tlie method of claim 26, wherein provisioning the ^^^^^"^S a provisioning request from a two-way mobile 
two-way mobile communications device comprises estab- communications device; 

lishing a secure communications link with a service server mutually authenticating the two-way mobile communica- 

providing a service which has been requested in the provi- 35 lions device and a provisiomng server; and 

sioning request; and sending a request to the service server forwarding the provisioning request to the provisioning 

requesting registration of the user for the service. server only if the mutual authentication was successful. 

29. The method of claim 26, wherein provisioning the 39. The proxy server of claim 38, wherein the proxy 
two-way mobile communications device comprises sending server bridges communications between a first commimica- 
activation information required to activate previously stored 40 tions network and a second communications network, 
non-operational applications in the two-way mobile com- 40. The proxy server of claim 39, wherein the first 
munications device. communications network is an aimet; and the second com- 

30. The method of claim 26, wherein provisioning the munications network is a wide area communications net- 
two-way mobile communications device comprises sending work. 

software modules to the two-way mobile communications 45 41. The proxy server of claim 40, wherein receiving the 

device to enable the requested services. provisioning request is via the airnet; and forwarding the 

31. The method of claim 26, wherein the provisioning provisiomng request is via the wide area communications 
server is connected to a landnet and the proxy server bridges network. 

communications between the landnet and an aimet to which 42, The proxy server of claim 41, which operates to 

the two-way mobile communications device is connected, so exchange information between the two-way mobile com- 

32. The method of claim 26, wherein the user selection munications device and the provisioning server via mutually 
further comprises the user's selection of features of the exclusive secure communications sessions with the two-way 
two-way mobile communications device the user wishes mobile communications device and the provisioning server, 
activated. respectively. 

33. A method for provisioning a two-way mobile com- 55 

munications device, the method comprising: ***** 
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